RemoteStorage self signed certificate

[jvincze84]

Hi All,

First please apologize for my bad English. So, I would like to use Lavena desktop app with RemoteStorage sync. I've successfully installed php-remote-storage app, but I don't have valid Certificate, but only SelfSigned. When I'm trying to connect to my remote storage service I get this error: (Screenshot was taken from laverna dev mode (./laverna --dev).

My Remote Storage setup works fine from browser, after I accept my self signed certificate.

I also tried to add my server certificate to "/etc/ssl/cert/", but took no effects. I've created a rootCA and signed my cert with this CA, and imported my rootCA, as well, but the situation was the same. After adding my certs to the system I can use curl command without cert error:

curl -I https://rstorage.vinyosoft.info
HTTP/1.1 200 OK
Date: Fri, 14 Apr 2017 20:25:47 GMT
Server: Apache/2.4.10 (Debian)
Strict-Transport-Security: max-age=15768000
Set-Cookie: PHPSESSID=3btjp6a99lqpjtod43v6mlpas6; path=/; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 1470
Content-Type: text/html;charset=UTF-8

Now I don't have any other idea to solve this problem.

Is there any way to add my SelfSigned Cert to Laverna, or any other method to use my RemoteStorage service?

Laverna Version: v0.7.4-RC1

Best Regards, Janos Vincze

[kelvix]

What OS are you on?

• On macOS you can add a certificate to keychain after having added the certificate you have to instruct keychain to trust the certificate for SSL certificates (I typically hit Always Trust).
• On Windows you can import the certificate to the Windows certificate store which should improve things (no Windows device to test this on).
• For Linux Chrome appears to bundle a certificate store into the application (not sure how one would change the bundled certificate store here).

Here is me trying to authenticate to your server as a demo user. I'll stop trying to do that now.

As a side note - free certificates are easy to obtain from https://letsencrypt.org and since it seems like you own your server https://certbot.eff.org is the recommended option.